Command injection

2023-03-1601:15:00

PRIOn knowledge base

www.prio-n.com

command injection

privilege escalation

ping.ccp

nvd

d-link dir820la1_fw105b03

9.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

59.6%

JSON

OS Command injection vulnerability in D-Link DIR820LA1_FW105B03 allows attackers to escalate privileges to root via a crafted payload with the ping_addr parameter to ping.ccp.

CPENameOperatorVersion
dir820la1_firmwareeq105.0.0-b3

CPE	Name	Operator	Version
	dir820la1_firmware	eq	105.0.0-b3

References

github.com/migraine-sudo/D_Link_Vuln/tree/main/cmd%20Inject%20in%20pingV4Msg

www.dlink.com/en/security-bulletin/